News for hackers. Stuff that matters.

A comment on The most popular docker images each contain at least 30 vulnerabilities. Parent comment

Re:The most popular docker images each contain at least 30 v... by DCKing on Tuesday February 26, 2019 @09:25PM (#19260351)
No security team can defend against unknown or any degree of unbounded controllers. Everybody has a risk tolerance of some degree.

Moreover, it seems you're stating that "no tolerance" should focus on having no CVEs in container images. Does the CVE database really have that level of authority for people? It seems like the wrong thing to focus on even in these hypothetical no tolerance situations, I'm really not sure what to tell you there.

[ Parent | on HN ]
Re:The most popular docker images each contain at least 30 v... by spydum on Tuesday February 26, 2019 @10:06PM (#19260514)
I mostly agree that it’s nearly impossible to end up with a container image with zero CVEs listed unless you are some sort of wizard. However I think images being built and deployed when there is an available patch is foolish (CVEs without patches are different story).
[ Parent | on HN ]